Hello guys! We having some problems.
We are using reCaptcha v2, but, when the user sends the information in the form, a "hash" is generated to afirm to the server that that user is not a bot, so far so good... But in our security test, we coul see that the user can use this same "hash" many times to send many different information, causing a vulnerability in our website.
The recapcha itself is showing us an error message: "We detected that your website is not verifying reCAPTCHA solutions. Activate the verification to use reCAPTCHA adequately."
The form is in this link:
www.bancoamazonia.com.br/index.php/atendimento/relacionamento